config: selinux support